Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3fE_PwbbT0YSw-BSRLZfdUKkLEo.roa
File: 3fE_PwbbT0YSw-BSRLZfdUKkLEo.roa (raw, json)
Hash identifier: ZPe4xfYJtAoktUleX7xILIb2ITVuQ4CLcz6SYZvbs6w=
Subject key identifier: DD:F1:3F:3F:06:DB:4F:46:12:C3:E0:52:44:B6:5F:75:42:A4:2C:4A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D28E9BCFF63F1677BB635C7C4358F2F8D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3fE_PwbbT0YSw-BSRLZfdUKkLEo.roa
Signing time: Thu 26 Mar 2026 06:51:40 +0000
ROA not before: Thu 26 Mar 2026 06:51:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150654
IP address blocks: 151.243.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:e9:bc:ff:63:f1:67:7b:b6:35:c7:c4:35:8f:2f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 26 06:51:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddf13f3f06db4f4612c3e05244b65f7542a42c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:f9:c7:d1:8e:d4:15:08:be:54:ea:ef:19:
5d:a7:bf:75:a6:d7:88:5e:71:a2:ea:27:ea:4e:cf:
fc:65:51:19:0d:d2:f6:0c:67:4a:a5:1c:45:2e:05:
7a:93:42:58:bb:b6:18:7e:41:c6:10:8c:29:05:fa:
d2:01:e0:55:48:59:b0:6c:71:88:9c:96:db:5f:dc:
77:f9:ec:14:70:e4:9b:a1:4b:94:25:6d:47:3b:b1:
48:ff:30:76:ec:0e:7b:2e:e4:46:96:ea:24:c4:33:
4e:ba:fc:9f:8d:dc:35:8e:11:72:3d:d8:22:6c:6b:
60:56:f0:ba:41:7e:e4:c0:d7:aa:7d:14:9e:99:8f:
62:1c:70:8d:bc:37:48:c4:48:14:d0:21:a3:ec:0a:
5a:1a:98:08:71:26:7d:70:5c:fc:6e:38:e4:e0:12:
21:ed:16:e1:ad:b7:d8:73:b2:64:1e:70:ff:78:bf:
c2:c6:25:99:c4:35:77:29:82:2f:08:24:18:c6:d3:
3d:24:67:28:f1:f1:1c:64:2a:bf:3f:2e:f7:38:8a:
e3:25:5a:6e:fb:9f:5b:a1:36:a5:55:e5:d7:5f:0e:
0e:20:92:cc:c8:b5:60:70:57:89:bf:de:33:ce:3c:
23:2d:72:d3:13:01:14:ec:54:be:78:23:0b:7a:e4:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F1:3F:3F:06:DB:4F:46:12:C3:E0:52:44:B6:5F:75:42:A4:2C:4A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3fE_PwbbT0YSw-BSRLZfdUKkLEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.144.0/24
Signature Algorithm: sha256WithRSAEncryption
86:1a:e4:f4:84:44:7a:30:9f:45:d3:b6:9e:d4:e8:97:96:9a:
ae:50:59:57:30:6c:62:d3:d8:88:a2:9f:ea:97:d9:81:40:00:
3c:00:1f:36:ca:ce:20:25:38:bb:28:36:df:4a:b6:e7:1b:3a:
a4:e4:9a:6c:7a:ef:2b:5a:94:47:14:5e:5b:15:cd:37:74:dd:
9e:6b:38:34:eb:0b:bc:db:04:84:36:e9:de:79:ef:38:65:38:
da:f3:72:0e:b2:b2:a6:9d:aa:8f:95:46:78:3f:e1:df:8f:c1:
5c:dc:85:1c:49:81:bd:4c:d9:f4:0b:6a:88:ff:0e:73:a7:68:
5e:49:b5:82:49:25:eb:41:cd:07:ad:7c:9d:75:34:01:06:62:
ea:af:66:cd:0a:48:7c:71:99:0b:66:d7:3a:26:c4:83:50:94:
1b:e5:42:57:d4:7c:4e:f9:13:d1:87:f4:23:4e:b5:f9:3c:0a:
cc:c0:55:ef:af:1b:f0:69:80:1f:07:06:34:91:64:36:31:79:
f1:c3:2e:b4:0a:e3:50:4f:21:9a:fd:91:8d:c6:40:93:2c:ac:
38:79:79:bf:8b:05:af:12:7a:e7:bc:6b:78:b9:2a:8f:9e:ba:
61:ee:ad:b2:b2:4b:0e:45:75:92:5c:73:c3:8a:ec:5e:9b:21:
1b:12:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:10:54 2026 by rpki-client